CVE-2021-38124

9.8 criticalEPSS 2.1%

Critical (9.8) in microfocus arcsight enterprise security manager. EPSS 2.1% chance of exploitation in the next 30 days.

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2021-09-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:arcsight_enterprise_security_manager

References

https://portal.microfocus.com/s/article/KM000001960
https://portal.microfocus.com/s/article/KM000001960

Check your stack JSON